Penetration Testing: Nortel Contivity 2600

[Cam Fischer <camfischer () gmail com>]

Hi list!

I am looking for good reasons why I should move a Nortel Contivity
2600 VPN device behind a firewall.

Currently the device sits on the internet, and is used for VPN traffic
from other offices, and also for VPN dial-in users.

Are there any risks with this configuration? What comments can be made
around whether or not I should be placing this behind the firewall /
IDS....

Thanks!